Privacy

Last updated July 26, 2026

together is a shared want-to-do list for real friends, operated by Aileron Software (Canada). This page says what we collect, what we do with it, and what we refuse to do. It is short because the product collects little.

What we collect

• Your profile. When you sign in with Google or Apple we receive your name, email address, and profile photo. Name and photo are editable in the app. Your email is the account key; we never use it for marketing and never send you email.
• Your list.The items you add, the notes you attach, check-offs, who you tagged as having been there, and whether you'd do a thing again.
• Your circle. Connect taps, connections, sent invites, and blocks.
• A push token, only if you switch on a notification for an item. If you never flip that switch, we never store one.
• Anonymised usage events. First-party only, stored on our own infrastructure. Events are scrubbed on your device before they are sent: no names, no emails, no notes, no free text, no item titles, no location — ever. We use them to understand whether the app works, internally, and for nothing else. They are never shared or sold.
• Crash reports, via Sentry, for crashes and errors only. No session tracking, no performance profiling.

Location never leaves your phone

The app uses your location, with your permission and only while you are using it, to show distances to places and sort the map. Distances are computed on your device against place coordinates that are already public data. Your coordinates are never sent to our servers, never stored, and never logged. No one — including your friends — can learn where you are from this app. Nobody's distance but your own is ever shown to you, and yours is never shown to anyone.

Who can see your list

Everyone in your circle can see your whole list, notes included. That is the product: open books among people who both chose the connection. There are no per-item privacy controls in this version — anything you want kept private belongs off the list. Nothing is public; people who are not in your circle see nothing.

What we don't do

• No selling or sharing of data with anyone, full stop.
• No third-party analytics or advertising SDKs.
• No reading your contacts — invites go through your own SMS app.
• No background location, no location history.
• No emails, no marketing, no re-engagement notifications.

Third-party services

Searches for films and TV go to TMDB, and for books to Open Library, through our servers — your identity is not attached to those requests. Poster and cover images load from their servers. Map tiles load from our tile provider. Sign-in is handled by Google or Apple under their terms. Place data comes from open datasets (Foursquare OS Places, Overture Maps) hosted by us.

Deletion

Delete your account in Settings. It is immediate and hard: your profile, list, notes, taps, connections, invites, and push tokens are erased, not archived. Friends' views simply lose your rows. There is no retention window and no way for us to bring it back.

Where data lives

Application data is stored with our hosting provider (Supabase, Postgres) and protected by row-level security — the database itself enforces that only your connections can read your list. Aileron Software is a Canadian company and handles personal information consistent with PIPEDA: we collect the minimum, use it only for the product, and delete it when you ask.

Questions

Write to together@aileronsoftware.com. A person reads it.